For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

Best Code Signing Software in 2026

Updated

In short: Cosign is ranked #1 of 26 as of 4 October 2026, ahead of SignPath and SignPath Foundation. The best-ranked option with a free plan is SignPath. The lowest first paid tier on this page is Bamboo Deploy at $15/mo.

Signing software releases calls for attention to both the signing process and the protections around it. Compare approval workflows, certificate provided, and cloud signing with CI/CD signing and HSM key protection. Supported targets and trusted timestamping help you review release-related capabilities, while free-plan availability and paid-from pricing add cost context. SignPath and SignServer begin the ranking, followed by DigiCert Software Trust Manager and Cosign; Sigstore is also among the first entries. Consider the targets you need to sign and the controls your release process calls for, then use the listed criteria to compare options.

26 code signing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

26ranked
6free plans on this page
$15/molowest paid tier
4 Oct 2026last checked

Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score

  1. 1 Cosign No phone app RecognisedPhone appDocumentedFree plan 6.4Free Supported targets: OCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestationsCertificate provided: YesCloud signing: No
  2. 2 SignPath No phone app RecognisedPhone appDocumentedFree plan 6.3Free Supported targets: Windows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifactsCertificate provided: YesCloud signing: Yes
  3. 3 SignPath Foundation No phone app RecognisedPhone appDocumentedFree plan 6.3Free Supported targets: Windows executables and scripts, MSI, CAB, AppX/MSIX, NuGet, Java archives, Android packages, RPM, Debian packages, Office macros, XML, JSON, OCI container images, ClickOnce, and arbitrary filesCertificate provided: YesCloud signing: Yes
  4. 4 SignServer No phone app RecognisedPhone appDocumentedFree plan 6.3Free Supported targets: Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassportsCloud signing: Yes
  5. 5 Sigstore No phone app RecognisedPhone appDocumentedFree plan 6.2Free
  6. 6 DigiCert Software Trust Manager No phone app RecognisedPhone appDocumentedFree plan 5.9 Supported targets: Windows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifactsCertificate provided: YesCloud signing: Yes
  7. 7 Keyfactor Platform No phone app RecognisedPhone appDocumentedFree plan 5.8
  8. 8 SSL.com Certificate Lifecycle Management No phone app RecognisedPhone appDocumentedFree plan 5.8 Supported targets: Windows executables, drivers, installers, scripts, .exe, .dll, .msi, .cab, .sys, .ps1, Java code objectsCertificate provided: YesCloud signing: Yes
  9. 9 Bamboo Deploy No phone app RecognisedPhone appDocumentedFree plan 5.7$15/mo Supported targets: EXE, MSI, DLLCertificate provided: YesCloud signing: Yes
  10. 10 ComSignTrust Secure Code Signing Platform (ASCS) No phone app RecognisedPhone appDocumentedFree plan 5.7 Supported targets: CAB, COS, EXE, DLL and other Microsoft Authenticode filesCertificate provided: YesCloud signing: Yes
  11. 11 Red Hat Trusted Artifact Signer No phone app RecognisedPhone appDocumentedFree plan 5.7 Supported targets: container images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML modelsCertificate provided: Yes
  12. 12 LAAVAT PKI and Signing Platform No phone app RecognisedPhone appDocumentedFree plan 5.5 Supported targets: NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signaturesCertificate provided: YesCloud signing: Yes
  13. 13 The Update Framework No phone app RecognisedPhone appDocumentedFree plan 5.4 Supported targets: Software updates, repository target files, packages, and digital artifactsCloud signing: Yes
  14. 14 Aujas Automated Code Signing Platform No phone app RecognisedPhone appDocumentedFree plan 5.3 Supported targets: Windows files; Java JAR/WAR/EAR/HPI; Android APK; RPM; Linux files; Docker images; iOS/macOS DMG, IPA, PKG, APP; XAR; MAGE manifests; WHQL/HLK drivers; VSIX; DLL, EXE, JS, SYS, MSI, VBS, MSP, OCX, PS1, WSF, CAB; Debian packages; Helm chartsCloud signing: Yes
  15. 15 CodeLocker No phone app RecognisedPhone appDocumentedFree plan 5.3 Supported targets: source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts
  16. 16 GaraTrust No phone app RecognisedPhone appDocumentedFree plan 5.3 Supported targets: Windows Authenticode, Kernel/WHQL, MSI/MSIX, NuGet, PowerShell, ClickOnce, macOS, iOS, Android APK/AAB, Java JAR, Docker, Notary v2, Linux RPM, DEB, GPG, firmware/UEFI, PDF, XML/XAdES, SBOMCloud signing: Yes
  17. 17 Notation No phone app RecognisedPhone appDocumentedFree plan 5.3 Supported targets: OCI container images and other OCI artifacts, including SBOMsCertificate provided: NoCloud signing: Yes
  18. 18 PACE Code Signing Platform No phone app RecognisedPhone appDocumentedFree plan 5.3 Supported targets: Windows, macOS, Linux, IoT binaries, AAX plug-insCertificate provided: YesCloud signing: Yes
  19. 19 Code Signing Key Management Server (CSKMS) No phone app RecognisedPhone appDocumentedFree plan 5.2 Supported targets: firmware, software applications, software images, block images, hash fingerprints
  20. 20 CyberArk Code Sign Manager - Self-Hosted No phone app RecognisedPhone appDocumentedFree plan 5.2 Supported targets: Code-signing keys and artifacts handled by integrated signing applications; specific target formats not confirmedCloud signing: No
  21. 21 GoGetSSL Cloud Code Signing No phone app RecognisedPhone appDocumentedFree plan 5.2 Supported targets: Adobe AIR applications; Mozilla object files; Apple Mac software; Java JAR applets; Microsoft Authenticode files including DLL, OCX, EXE, MSI, CAB and kernel software; Microsoft Office VBA files; Microsoft Silverlight applicationsCertificate provided: YesCloud signing: Yes
  22. 22 Signotaur No phone app RecognisedPhone appDocumentedFree plan 5.2 Supported targets: Windows executables and installers, PowerShell scripts, AppX/MSIX, NuGet packages, VSIX packages, ClickOnce/VSTO manifests, RDP files, Apple configuration and provisioning profiles, CMS/PKCS#7 files, archives, PDF and XML documentsCertificate provided: YesCloud signing: No
  23. 23 AWS Signer No phone app RecognisedPhone appDocumentedFree plan 5.1Free Supported targets: AWS Lambda deployment packages; IoT and FreeRTOS firmware images; OCI container imagesCertificate provided: YesCloud signing: Yes
  24. 24 OpenPubkey No phone app RecognisedPhone appDocumentedFree plan 5.1 Supported targets: messages and artifactsCertificate provided: No
  25. 25 Signo No phone app RecognisedPhone appDocumentedFree plan 5.1 Supported targets: Files; Windows executables via Authenticode

Is your app on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

#1 open#2 open#3 open#4 open#5 openClaim your listing — free

Questions about this list

Which code signing software is ranked first on Samsung Mobile US Press?

Cosign is ranked #1 of 26 with a score of 6.4. SignPath is second and SignPath Foundation third.

How many of these have a free plan?

6 of the 25 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, Bamboo Deploy has the lowest first paid tier we found: $15/mo.

How is this list ranked?

Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.

More in Developer Tools

All developer tools lists
Accessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Software Composition Analysis Software 64Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 55